On 7/4/16, 12:07 PM, "users on behalf of Mark Cairney" <users-bounces at shibboleth.net on behalf of Mark.Cairney at ed.ac.uk> wrote: > This SP works fine with Shib 2 and has no special configuration That SP is requesting ForceAuthn, and use of RemoteUser with either IdP version does not support ForceAuth by default. -- Scott